This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: 9hHBX360xtMo9m7GL5JsmwbRbi3aI+VVQg3pImp4ZBI= Subject key identifier: 52:C9:C9:C6:65:3B:65:50:4D:6C:6A:85:9E:63:90:5E:A5:D8:B8:A4 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 5C2528A46A6C718566E0693A58CBC902F7103ECB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: E7 Signing time: Wed 17 Dec 2025 01:51:22 +0000 Manifest this update: Wed 17 Dec 2025 01:46:22 +0000 Manifest next update: Sat 20 Dec 2025 11:29:22 +0000 Files and hashes: 1: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) 2: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: yMl2I/dblzRXkDr50E2Qn+U+nYFdZmu+SYiotzELlcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:25:28:a4:6a:6c:71:85:66:e0:69:3a:58:cb:c9:02:f7:10:3e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Dec 17 01:46:22 2025 GMT Not After : Dec 20 11:29:22 2025 GMT Subject: CN=52C9C9C6653B65504D6C6A859E63905EA5D8B8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1e:44:88:fc:38:6b:18:20:16:65:af:09:9d: 5e:11:70:b7:05:c1:4e:e4:7e:b0:e9:af:0f:5d:1f: 29:d9:71:4f:8a:cc:98:5f:23:6a:14:83:b2:05:33: 5b:2d:2b:98:f4:32:24:43:dd:87:ce:a6:e9:6a:28: d2:38:ff:b6:bb:2c:7e:03:8f:77:5c:4f:e9:2a:40: b2:a0:f9:aa:d7:20:8f:3d:69:a8:9f:19:34:7e:88: 29:40:e5:8b:5d:a7:25:29:88:75:4c:b9:91:9a:7b: cc:48:56:00:34:5d:7e:75:76:ce:a9:d1:cf:22:37: 95:01:b8:5b:6a:b6:74:8b:97:77:ae:2b:c8:ec:38: 24:5c:61:b7:53:29:08:8e:d2:0c:e3:4d:aa:74:45: fd:16:b3:ab:4a:d8:71:c3:8f:fb:a1:e7:75:e1:ec: 30:1e:a0:8a:e0:01:d7:05:ca:07:de:16:81:2f:e6: fe:b8:87:87:c0:21:d8:b8:b1:0a:00:2c:6f:fc:5c: 8e:cc:a1:91:0f:e8:e9:31:2d:a3:00:8e:8d:01:c1: 4f:b7:eb:22:7f:da:c6:06:f6:a1:71:a8:0c:f2:dd: 50:d4:24:8c:3b:d6:64:1b:66:94:30:35:27:b0:13: fe:b2:e0:66:59:93:91:40:9d:dd:f6:e9:f2:97:c1: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:C9:C6:65:3B:65:50:4D:6C:6A:85:9E:63:90:5E:A5:D8:B8:A4 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d4:f5:93:15:3b:37:a9:93:fa:a5:cc:81:0a:18:b8:cc:25: 45:f8:43:58:18:39:a7:b1:df:94:a2:39:be:20:a1:7f:5b:05: 25:aa:df:05:e4:7a:08:a6:60:b6:58:ff:8f:6f:90:6d:73:e3: c0:bb:ef:1e:79:31:1a:cd:af:9f:4c:a9:73:49:22:68:36:df: 67:4e:d9:cc:4f:e4:b3:7d:56:b3:58:1e:15:45:bc:5c:01:13: 50:5f:ca:de:80:de:82:08:c9:45:5d:33:3d:21:64:6d:47:db: 7a:ec:60:b3:db:43:01:01:33:79:d1:54:0e:d9:56:4a:e2:f1: 7e:9a:35:6f:78:8b:87:47:73:1b:10:0f:15:e6:87:df:1b:a0: 3b:2b:0b:3d:33:81:69:0b:63:aa:d1:0d:38:74:66:e1:6f:b5: 80:9d:8b:ad:0d:23:52:29:b4:f4:fe:b7:b1:d6:b5:ee:fd:a7: 7e:00:c9:15:26:a4:20:7b:84:25:62:ec:76:74:0f:e4:f2:32: 81:2d:b5:80:03:bb:15:c0:73:81:68:c0:5d:12:5b:30:ff:9d: 7b:d0:66:7c:0e:51:ae:b7:12:1f:23:c4:e7:84:90:ac:02:95: 95:92:c1:aa:7b:d8:e1:b9:24:69:7a:02:51:2d:d7:0a:8d:d5: 33:72:93:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCUopGpscYVm4Gk6WMvJAvcQPsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTEyMTcwMTQ2MjJaFw0yNTEyMjAxMTI5MjJaMDMxMTAvBgNV BAMTKDUyQzlDOUM2NjUzQjY1NTA0RDZDNkE4NTlFNjM5MDVFQTVEOEI4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHkSI/DhrGCAWZa8JnV4RcLcF wU7kfrDprw9dHynZcU+KzJhfI2oUg7IFM1stK5j0MiRD3YfOpulqKNI4/7a7LH4D j3dcT+kqQLKg+arXII89aaifGTR+iClA5YtdpyUpiHVMuZGae8xIVgA0XX51ds6p 0c8iN5UBuFtqtnSLl3euK8jsOCRcYbdTKQiO0gzjTap0Rf0Ws6tK2HHDj/uh53Xh 7DAeoIrgAdcFygfeFoEv5v64h4fAIdi4sQoALG/8XI7MoZEP6OkxLaMAjo0BwU+3 6yJ/2sYG9qFxqAzy3VDUJIw71mQbZpQwNSewE/6y4GZZk5FAnd326fKXwTfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsnJxmU7ZVBNbGqFnmOQXqXYuKQwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnU9ZMVOzepk/qlzIEKGLjMJUX4Q1gYOaex 35SiOb4goX9bBSWq3wXkegimYLZY/49vkG1z48C77x55MRrNr59MqXNJImg232dO 2cxP5LN9VrNYHhVFvFwBE1Bfyt6A3oIIyUVdMz0hZG1H23rsYLPbQwEBM3nRVA7Z Vkri8X6aNW94i4dHcxsQDxXmh98boDsrCz0zgWkLY6rRDTh0ZuFvtYCdi60NI1Ip tPT+t7HWte79p34AyRUmpCB7hCVi7HZ0D+TyMoEttYADuxXAc4FowF0SWzD/nXvQ ZnwOUa63Eh8jxOeEkKwClZWSwap72OG5JGl6AlEt1wqN1TNyk8s= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:40 2025 by rpki-client